Privacy policy

1. Data we handle

• Account and sign-in data: your email address, name or display name, account identifier, sign-in provider and information needed to authenticate you. Android uses Google sign-in; the iOS app also supports Sign in with Apple, including Apple's private relay email where selected. The sign-in provider may supply a profile image. FFL does not receive your Google or Apple password.
• Game data: your chosen display name, favourite club, represented country, team selections, transfers, points, competition participation, rankings and related game history. The country you choose is profile information, not a measurement of your location.
• Support data: messages, images you choose to attach, conversation history, feedback, support cases and relevant account or game context. Language, region and time-zone settings help us reply in your language and interpret match times.
• Notification and device data: push notification tokens, installation identifiers, notification preferences and technical information needed to deliver requested game notifications.
• Security and diagnostics: app version, device and operating-system information, error reports, technical operation and sync events, and information used to verify the integrity of the app or device. Our infrastructure providers may process IP addresses and other connection information when you use the app or visit this page.

The app stores game data and sign-in state on your device so it can remember your session and show cached content. This page does not use advertising cookies, analytics scripts or forms.

2. Why we use this data

We use personal data to create and maintain your account, save your team, calculate points and rankings, display competitions, synchronise your devices, provide support, deliver notifications you enable, diagnose failures and protect FFL against abuse.

Where the GDPR applies, account and game processing is necessary to provide the service you request. Security, reliability and support improvements rely on our legitimate interests in operating and improving FFL, balanced against your rights. We rely on consent where required for optional processing and comply with applicable legal obligations. You can decline optional notifications and support-image uploads while continuing to use the core game; sign-in and basic game data are needed to play.

Scores and rankings are calculated automatically from your selections and the game's published rules. These calculations determine game outcomes, not decisions about employment, credit or similar real-world eligibility.

3. Visibility, sharing and service providers

Other players can see game-facing information such as your display name, chosen club and country, team, points, transfers and ranking where those features display it. Your email address, sign-in credentials and support conversations are not made public to other players.

We use the following providers for the purposes described above:

• Google / Firebase / Google Cloud: authentication, hosting, databases, file storage, backend services, notifications and Android app-integrity checks. See Firebase's privacy information and Google's privacy policy.
• Apple: iOS sign-in, app-integrity checks and notification delivery where applicable. See Apple's privacy information.
• Expo: app-update delivery and the push-notification service. Notification tokens and delivery information are processed to deliver notifications. See Expo's privacy policy.
• Sentry: crash and technical error reporting. We filter diagnostic content and use a pseudonymous account identifier rather than sending the raw account ID. Automatic screenshots and session replay are disabled. See Sentry's privacy policy.
• OpenAI: AI-assisted support, including relevant messages, attached images, limited conversation and game context, and text representations used to retrieve related support history. FFL support staff may also review these materials. AI processing follows the support disclosure shown before you send a message; support availability can vary during testing. See OpenAI's business-data privacy information.

FFL does not sell personal data or use it for targeted advertising. The current store version does not display advertisements. We may disclose information where necessary to meet a legal obligation or protect users and the service.

Providers may process data in countries outside your country of residence, including outside the European Economic Area. Where required, transfers rely on applicable adequacy decisions or contractual safeguards. Contact us for information about the relevant providers and safeguards.

4. Retention and security

Account and game data are retained while your account remains active and as needed to provide ongoing competition history. Support messages and images are scheduled for deletion after 90 days; you can also use Delete conversation in support to request earlier removal of the conversation and its associated support records.

Diagnostic and security records are retained for the period needed to investigate failures, prevent abuse and meet legal requirements, subject to the relevant provider's retention settings. Service-provider logs and backups can follow separate deletion cycles; deleting an account does not necessarily remove all backup copies immediately. We can provide further information on request.

We use encrypted network connections, access controls, authenticated requests and app-integrity checks to protect data. Access to private account and support information is restricted to the account holder and authorised service operations.

5. Account and data deletion

During testing, request deletion of your FFL account and associated personal data by emailing danielhaukaas1@gmail.com from the email address associated with your FFL account. We may need to verify that the request comes from the account holder. Signing out or uninstalling the app does not delete server-side account data.

The automated in-app account-deletion and recovery service is still being prepared. We do not describe those controls as operational in this testing version. Use the email contact above for deletion requests and to ask about progress.

Account deletion removes or anonymises your identifiable account and game information. Minimal anonymous competition history may remain to preserve rankings and the game's historical integrity. Information required for a legal obligation or a specific security investigation may be retained only for that purpose.

6. Your choices and rights

You can control notifications in your device settings and choose whether to submit messages or images to support. Do not send passwords, identity documents or other sensitive information in support messages or images.

Depending on the law that applies to you, you may have rights to access, correct, delete, restrict or object to processing of your personal data, receive a portable copy, or withdraw consent for processing based on consent. Withdrawing consent does not affect processing that was lawful before withdrawal.

To exercise these rights, email danielhaukaas1@gmail.com. You may also complain to your local data-protection authority. In Norway, this is Datatilsynet.

7. Changes and contact

We will update this page when our data practices change and update the date at the top. Material changes will be communicated through the app or another appropriate channel.

Daniel Haukaas
FFL: Fantasy Football League
danielhaukaas1@gmail.com